← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1368171
Ca Certificate Compliance
Incident
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves Firmaprofesional's intermediate certificates that were found to be non-audited and lacking technical constraints, despite chaining to a root certificate in Mozilla's root store. The issue was raised by Kathleen Wilson, highlighting specific certificates that did not meet compliance requirements. The CA acknowledged the concerns and confirmed that the certificates have been added to OneCRL, indicating they are no longer in use. The bug has been resolved with the status marked as FIXED.
Chronology
- Initial report of non-audited intermediate certificates by Kathleen Wilson.
- Confirmation that the certificates have been added to OneCRL.
Thread Activity
- Mozilla representative — Reported non-audited and non-technically-constrained intermediate certificates.
- Isigma representative — Provided details about the audit status of one of the certificates.
- Mozilla representative — Noted that the audit information for the certificates has not been updated in the CCADB.
- Mozilla representative — Confirmed that both certificates have been added to OneCRL.
Participants
Mozilla representative
Autoridad de Certificacion Firmaprofesional
Isigma representative
Community commenter
External References
Similar Local Cases
Firmaprofesional: Non-BR-Compliant OCSP Responders
Firmaprofesional: 2021 Audit Report Finding 3 out of 3
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy
Disig: Non-BR-Compliant Certificate Issuance
Microsec: Non-BR-Compliant Certificate Issuance
Firmaprofesional: Undisclosed Intermediate certificate SIGNE
Firmaprofesional: 2021 Audit Report Finding 2 out of 3
Firmaprofesional: Incorrect OCSP Delegated Responder Certificate